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Dr. Otto Karl Winkler, Vienna, 16 Oct 1345 

VIENNA I., Liliengasse 1. . 

Subject: FRENCH and GREEK Cryptography as : carried out by N.A.A.St.4 . 

REPORT , 

I 'was bom in VIENNA in 1316 and studied history at the Faculty of 
Philosophy in VIENNA. During the war I was. employed as a translator 
of FRENCH and GREEK and as a cryptographer, 1 from 15 Bed 40 to 8 May 45, 
vdth N, A. A. St. 4. Following Gennany's collapse I consider myself as 
an Austrian and a European entitled to piece my knowledge of the 
unit's work at the disposal of the British ’intelligence Service. 

My first employment was on the breaking and translating of 
Greek Air Force messages in Spring 1341/ The. unit was in BUCHAREST at 
that time and later it was at BANJA KDSTENIC in Bulgaria. C.O. was 
Hptm. SCHMIDT, head of the cryptography and translation department 
from then until Autumn 1944 was Prof. 'Alfred KNESCHKE, a 
Professor of. Matheroatios from Saxony. 

. The Greek Air Foroe messages were a matter of., simple boxes ", 
the text being sent in T/t groups , The indioator took the form of 
3 letters whioh were always in a given position. . the first three 
T/L groups and had to be knocked out before entering the cipher text :' ' 
in the clear_box, This was broken by writing out the oipher text in 
vertical strips of varying depth and sliding them against each 
other until a few Greek syllables appeared above, one another. 

After the initial break it became clear that a large part of the 
messages began with the wrcLa 'parakalw', ' enaferw' and 
apesteilaraen' and that the width of the box was as a. rule 
between 15. and 22 columns. On the basis Of, the above, initial 
TOrds, all messages were , tried out on the. 1 normal number of 
columns and nearly everything was read. I had less to do with 
the actual evaluation, firstly because the two departments were 
kept separate and secondly because we were kept fully occupied 
with out own job. In any case the aontent of the messages was 
usually of insignificant- strategic value,: although the 
dontinuous check on officer personalities!', deliveries of stores 
and knowledge of airfields combined with D/F bearings indireotly 
contributed to considerable tactical results. 

Greek Away end Navy messages were not broken until after the , 

conquest of Greece, when captured 'Codes' were read during the 
attack on Crete, 

In May 1941 the unit moved to ATHENS, In the Autumn of that 
year the De Gaulle troops in Syria began to send oipher messages. In 
collaboration with Dr. Josef Lockher from SCHARDING on the INN, ' .a 
oonvmoed Catholic, Austrian and pan-European, who was our 
number one Frenoh and Russian interpreter and beoame head' of the 
French cryptographic seotion, I was given the task of working, 
on these messages . The break-in was comparatively easy in view of 
the foot that we had covered French w/T traffic from the 
beginning and had a good idea of the type, construction and content 
of messages from earlier plain language traffic. Furthermore the 
Frenoh have hardly ever failed to construct their oipher systems 
systematically and logically (i.e. on a non-hatted basis), thereby 
increasing the value of any break-in. 
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The messages were sent in. t/L groups, the middle letter always' 
■being one of the 5 vowels. The first code was constructed completely 
systematically and alphabe'tically, i.e, in! the A-table there were 
three oolumns with letters followed by the. code words in 
alphabetical order: at the end in the U-table were words beginning, with 
V' and Z and the punctuation signs (soe Appx 1) . Naturally .there were / 
a lot of spellers so that the .three letter-columns- of the A-table s tood 
out. They, provided an easy break-in what ever changes took: place in the 
reoiphering system. We were thus easily able to recognise the spelling 
sections, take- a separate count and get them out.os simple 
substitution (Casoren). As we knew the sort of texts to expect and as 
.the oode' was alphabetic the remainder- of the code was easily 
reconstructed; At the start the code was valid for months on end , 
with the first systematic recipher key, later the letter was changed 
mare and more frequently, by hatting both middle vowels and the final 
consonants of the T/L groups, the latter giving the column of the- 
code, whilst the initial consonants which gave the rows for the. ■ 
column? were likewise hatted so that the same words always, remained 
in a given column and the columns for the, letters of the alphabet 
were likewise unchanged. We had to 'use. a new code-sheet 
for each decode whilst the French- undoubtedly left the code: 
unchanged and merely stuck over a strip, horizontally, for the 2nd 
and 3rd letters on the T /h group, i-*e» substituted ab, ac, ad, af.. 

by, for* example ud, ar,. eg , and another vertically, hatting 

the approx 14 consonants used for the 1st letter of the trigram. The 
key could be broken again within 24 hours of a change,, as we were well 
in the picture as regards both code, and texts. Somewhat later the French 
introduced T/t, cover groups for all tactical units and place names,- 
which were quite obvious as' the middle letter of these" .trigrams was 
not a, vowel, These tables when. broken displayed a systematic contru- ' 
uction similar to that of the code. However the work on these 
tactical cover-names was' the responsibility of the evaluation section,- 


Apart from the t/L messages, 2-figure and 4-figure' messages were 
also sent by the Syrian police, which were simple substitution 
(Casoren) with alternative 2-figure cipher groups,’ This system continued 
in use by the French until iutumn 1943. Practically the whole 
'Syrian WT traffic was read and a complete picture obtained of the 
build-up, strength, composition and. organisation of the French 
armed foroes, of the political administration and the names of all 
important personalities, as well as all changes and troops .movements.. 

In oharge of evaluation of French material at this time was 
Wm. KBHNAEFEb from ( 7K0NIGSBERG) , 


As the French used also to refer to British troop movements 
and officer personalities from time to time, such pointers were 

Of considerable use to our English evaluation section, as the > 
British ciphers could not as a rule be broken by German Sigint. 

In French Equatorial Africa, there was a lot of P/t traffic 
but also diagonal box letter traffic which was only occasionally 
broken. 
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: In Spring 1943 Wn. Dr. LttoKHER was -transferred to the - v ; 
Interpreters pool at MEISSEN on grounds of political unreliability^ as 
like several of us, he had declined to accept a Commission and was 
held to be the leader of the opposition a amp. I had to take 
over the French cryptographic seotion in his plaoe, despite 

i»y reputation . os, a catholio and. ah Austrian. I ■ handed over ■ 

toon afteiMrards to Wni; -SEEKAN dhiy to take over.qnae more in 
BELGRADE iri: the . winter of 1943. - By this time Fi'N| : A,St.5. in 
EPANOMI near SALONIKI were woricing on current. systems. 

: The French hod gone ori to. -a hatted 5-figure ,oode which woe ; 

boxed (verwittfelt) and sent ih. ^figure groups* i ? .The.: break^ih whs 
achieved by a teaoher of mathematics from MECKLHffitmG, whose name ' 

I have forgotten' for the moment. I am also unfortunately unable 
..to reconstruct the onse as I have always been more of an authority oh 
languages whereas the tricky Cryptographic jobs were handled by 
mathematicians. , ’ 

,.Vr ; Apart, from these the French, used to! send letter .traffic based 
oh boxed simple substitution. Substitution keys and boxes •were 
. changed every 14 days*; With good reception a n d sufficient > 
material it was usually possible, in several days .;hard woik- by 
dint of our knowledge of the language and Certaincharoctbriatic 
place names .Buch as RAKKA, to reconstruct bd'th ihe key arid, the box. 
Furthermore] the Ffench passed letter , traffic. eridlpHered.M a simple 
Up end down box] the text beirigi written from the fight to left arid 
■ alts rnately 1 ; from the .bottom theft from the top] Figure substitution 
.(with alteratives). cohtihUed . to tie sent. ■ . 

The emit moved to BSLC-RAD®- in Autumn 1943,' thence. ::£« Augdst 
1944 to EERNITZ near WIENER NEOSTADT, . However,; I . received a new ■ 
task in Spiting 1 944 vdth . the . appearance of ■. Greek messaged £eht by, 
ELAS. In the cohrse of OUT two year stay in Athens I had been able 
to learn modem Greek almost perfectly, on the basis of ,a knowledge 
Of classical Greek arid spurred on by love. for Cnd interest in 
Greece, In addition iby duties had provided me with a .'.Certain 
experience of cryptography and a good tfarislaiibn teohnigUe . Thus 
.1 was put in charge of Greek cryptography and. was assisted in the 
• . actual cryptographic work by Uffz. Diether STROHL from BERLIN, an 
English interpreter and technical student, I had held the rank 
of Woohtmeister since- Christmas 1943, The main credit for 
breaking the Greek double transposition undoubtedly belongs to 
Uffz. STROBL, whereas i had to concentrate my. efforts, in view of 
the great mass of readable traffic, mainly on the. actual 
translation, arid supervision of the job. The original' group of 
6 men was increased to 16 in the six months from then until the 
evacuation, of Greece; As soon as the first break-ins were 
achieved 'thC seotion was attaohed to Nnohr. Aufkl. Zug •&* which 
had been newly formed. to. Cover wireless and line traffic of the 
Greek Free Forces in SALONIKI. The O.C.. was Lt. OTT from 
Bavaria, in charge of evaluation was Lt. SCHNEIDER from BREMEN, 
assisted by Uffz. Dr. SPRINGER from VIENNA. XVIII, aEdelhofg. 13 . 
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In the beginning the Greeks sent in two-figure substitution 
with alternative groups. 'As' few messages were sent on the seme 
substitution, it used, to take several days to break and read 
these substitutions, ELAS soon went over exclusively to letter-traffio 
based on a double^transpoaition. A number, usually four figures, at the 
beginning of the message referred to the 'keyword' as contained ih 
a 'key book' . With the aid of this the decoder constructed the key 
to both boxes, based on'the alphabetic sequence. 

E.g. ELEYTHERA ELLAS 

3 6 4 13 7 511 1 6 9 0 2 12 

Double, transpositions are regarded. as .a secure type of .' 

cipher Mid are therefore used by many British agents. 'Tkr’the , 

best of my knowledge the unit never 1 succeeded- in breaking one 
and oily occasional . captured material has rendered it possible 
to read some. traffic retrospectively. .For the sake of security 
it is essential to avoid using complete or even square boxes, 
typical beginnings, or endings of: messages and constantly 
recurring addresses and signatures, to use each key as little 
as possible and as far as possible to have different keys for 
each box of the pairi The Greeks overlooked all these 
rules right, op to the end, with the result that messages in 
■ the same setting and with, the same number of groups ^(ELementeanzahl) 
cropped up. By assuming a likely, word in one message it was' 
possible to set out the relevant letters arid to fill in underneath 
the corresponding letters from the other message, The correct 
positioning was confirmed when both the upper and lower, letters 
made sense. When about two lines had been reconstructed by 
linguistic guesswork, it was possible to reconstruct the box by 
inference. - 

The simplest breaks, however, were achieved by trying 
out boxes simply by choosing messages in which the number of 
groups constituted the square of a likely box length. With, a 
square box of this type the normal rules for double 
transposition procedure go by the board. The depth and 
number of columns is knows so that the 'clear is recovered in a very 
short time simply by trying out the columns in various positions . 
until likely looking words and syllables are reconstructed 
in the different rows. ' . 

The original break-in was achieved as a matter of foot, 
by the fact that a long bit of text was repeated in two' messages of 
different length and happened to form .striking repetitions whioh 

'suggested a single box. The length of the box was • correctly 
discovered from this assumption, but it then became apparent, to 
the surprise of all concerned, that it was in fact a question .of 
. double boxes . 

- These early. breaks provided us with. a sufficient picture of 
the constantly recurring addresses and signatures in certain 
traffic, as well as the habit of certain cipher clerks of 
filling in the box. We: then went on simply to try all 
likely lengths in search of the anticipated addresses and 
signatures, for a start assuming a full box then trying with 
smaller or. bigger bites. The diffioulty of this was increased 
by the fact that the Greek cipher. personnel often broke off 
in the middle of a word so that every possible position of the • 
word must be tried out (see Appoe. 2). 
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, . In the cipher .text of Appx,2 the address 'OMAHA MERAEGHIHN' 

is token to have Been corre.otly assumed. . It is. further assumed 
that the Greek encipherer likes to. complete his box end it is 
decided to try the 1A3 letter, message on a box with key length 
13 across and 11 dovm. ’Attempts with other key lengths have 
already been eliminated for this setting. In the cipher text 
'amongst the uncommon letters 3 W and 6 CH appear. We .work 
from these letters. The 1st W comes in column 1 of the • 

.enciphered text. It is in the 6th position and should therefore 
come in the. 1st position in column 7 or 8 of ; the clear box 
(lb green). Column 8 cari.be eliminated at onoe as coluran 
m" cannot be column <t and. column 8 simultaneously. Let us 
assume then that column ,"b" is number 1 . and column "m" ' number 7.' 

In the 7th column of the cipher text the 6th. position is occupied 
by., an 'a' which must thus. come in the first row of the clear 
text; there are three 'a'.. in the first- row of the clear -text 
buf neither column 'o' nor >e* nor. 'i* can be, number 8, as this 
would put the letters 'p' : t * X * or '6' in. the first row of the 
clear text and none of these occurs in the. assumed address 
OMAHA. MERAEOTIWN" i We must thus try out the: second 'w'. 

.frqm oolumn 7 of the cipher text. This is in" the 10th, position * 
and thus is only, feasible '.for column e' ' of the cipher box. This 
is thus given the number 7 and 'm' the number 1.2. In the 6th 
■ .position -of the 12th column; there is an' *ra' which letter oocurs 
in the 1st row of the clear text arid must be tried out' for 
column 'b' and 'ft. And soon, if one domes to a i 
dead end, one' must try out CH in the same way as with 'w*. 

If the box is not complete - (Appx.2.Il) 'every possible column 
beginning must be taken into account .thereby increasing the 

number of attempts three. to five times. '. i ' 

In , any. case we succeeded' in breaking 50 - 6($ of -the . 

"traffic tackled and as important messages, were always, retransmitted .on 
several links with different keys, we were able to build up an almost 
coiylete picture of the build-up, organisation and composition of 
EAM and ELAS,. to cPrapile lists of their leading personalities > 
and. officers and to inform the competent .German political" and 
military .authorities in good time about many planned military 
and political actions, aots of sabotage, ambushes, dynami tings, 
etc . I can only remember a. few details and cannot reproduce 
examples systematically as' the evaluation of the material, was 
not my job,, which consisted only of deciphering, deooding and ' 
translating the available material. 

. The messages also provided information -about the exact 
location of allied airfields in the Greek mountains, -about 
the position, strength and activity of the Allied military missions 
and various British, commando troops, about the fate of several PW 
about the .Greek internal and inter-allied crises and struggles ’ 
(KKMEPE), about the. British tactics for .the occupation of '• 

Greece and the agreements reached with regard. to recognition 
signals to be exchanged with ELAS ships,- etc. However. I oan only 
recall these very general results. . 1 
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. °” 15 0ot ^ the unit ieft SALONIKA to march to SARi 

via MITROVICA, NOVI FAZAR ana SJENICA,. where it was given tl 
. task: of c°verin g the Jugoslav area, I was then transferred 
. N.A.A.St.4. whioh was at HAUSMANNSTRrTEN hear GRAZ .from Jan 
until Easter 45 when it moved to EBEJTHAL near KtAGENFURT. ' 
last 0.0. of the unit was Hptm. KROGER, the last head of the 
crypto party was Obits LttDERS.* I was transferred to Tito- 
. 0 twS^SS raphy ’. which was directed by Oberinsp. SCHREXER from. 
MuNCHEN. As I had not . followed developments in. this sphere 
from the beginning and also had 'only. slight knowledge of the ' 
languages, I. never achieved, any deep or general knowledge of 
. tne work. I personally worked on Slovene figure.-traffio, 
consisting of 2-figure substitutions with alternative groups whioh 
were- mostly reciphered with a 25 or 50 figure recipher, of ' 
Transposition systems (WECfiSECBTELLm) andof simple, substitution ’ 
, . , a continuous or periodio recipher. I have hardly any 

knowledge of the content of these, messages, as' I' was not 
employed on their translation. 

_ ■ 1 certify that the above information is true and 

furthermore undertake to keep my knowledge secret and never to use 
it to the detriment of England or Europe. So far as I. am able to 
do. SO from memory, I ..ami prepared willingly to . answer any further 
questions* . ‘ 


s 
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